Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
File: Te9bj_uvfVavXTny-UyUbXL3cPM.mft (raw, json)
Hash identifier: azI8cq5hX7zkkFJFLp6Fl+9UaFC//8UixePfv6BOwlU=
Subject key identifier: 79:C4:17:30:CE:E5:D1:9E:A9:11:03:6A:9A:43:A0:A3:1D:54:F5:60
Authority key identifier: 4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
Certificate issuer: /CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Certificate serial: 0196BCA4BDDC0EEF2E67A77880988E0FEED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
Manifest number: 11AB
Signing time: Sun 11 May 2025 00:00:35 +0000
Manifest this update: Sun 11 May 2025 00:00:35 +0000
Manifest next update: Mon 12 May 2025 00:00:35 +0000
Files and hashes: 1: C0P7fdeMbUq_SUkoUNzucceRO_o.roa (hash: IOK/1252dBZyKN3aeAn78pq+rzDgEYZNrHyoRwRIUaA=)
2: Te9bj_uvfVavXTny-UyUbXL3cPM.crl (hash: 3UvVuWzN7yOQOZE9Pfv7SRXhoDCKSMRLO4BdwzPO5eg=)
3: TgX6Ahejr8dFzzFT1WSFiJRu3Do.roa (hash: htkxM3uRu+UJ0kbLuQsKy6qnAb8htaldVtC4MZ15XTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:bd:dc:0e:ef:2e:67:a7:78:80:98:8e:0f:ee:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Validity
Not Before: May 11 00:00:35 2025 GMT
Not After : May 12 00:00:35 2025 GMT
Subject: CN=79c41730cee5d19ea911036a9a43a0a31d54f560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:a3:e9:11:a3:b5:a5:f9:5c:ae:17:ee:1a:
90:f5:46:2f:a1:34:e0:e0:9e:54:d6:46:1c:ec:2a:
59:a5:72:22:b2:c8:2d:5d:5f:81:cb:40:18:a1:c1:
22:5d:a6:75:9e:0a:56:61:d2:08:cc:89:ae:68:21:
c6:95:98:b9:2c:2f:f2:1f:8f:bd:7e:46:3b:06:a8:
61:cb:c5:f3:13:e2:89:59:a4:49:04:bc:07:5a:26:
69:a5:f8:47:bf:f5:f2:41:a7:bf:67:a6:10:54:ec:
62:a3:68:eb:79:82:4b:42:d4:73:21:73:be:82:c3:
28:e2:37:f1:a9:e1:2e:08:63:dc:38:cd:a4:ab:b0:
aa:04:22:01:27:49:33:67:d7:06:68:5c:0f:61:ef:
ca:2e:73:2d:88:1d:2d:a4:21:85:60:76:31:8f:0e:
8b:2c:a7:31:fb:01:76:ee:a3:53:5f:d8:17:4f:84:
d6:70:a4:cb:18:6e:55:49:f0:04:50:5e:ff:83:ba:
49:1d:5d:b6:16:c7:4a:19:05:1f:72:c3:14:c5:89:
6d:c4:a4:d6:89:80:75:c8:c1:5b:6c:1d:b9:cd:6d:
e3:0f:e3:2b:f7:fd:ed:16:9a:0a:9a:d0:2e:f1:b5:
07:88:61:6e:ce:24:d4:9b:9c:bc:05:a8:2f:c3:81:
a2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C4:17:30:CE:E5:D1:9E:A9:11:03:6A:9A:43:A0:A3:1D:54:F5:60
X509v3 Authority Key Identifier:
keyid:4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ce:10:cc:bd:b6:3d:06:b8:f5:73:7d:42:6b:a4:d6:bb:59:
35:fb:3d:42:52:a9:72:4e:79:59:ac:76:fa:52:32:f1:ee:fc:
d7:e9:d7:7f:2e:5d:08:2d:13:a4:21:54:b7:b5:f7:d9:83:59:
f2:5a:ca:7d:9b:31:fe:a6:eb:e9:fb:42:8a:b9:38:1f:f2:48:
76:5b:72:85:15:5e:9e:fa:26:cf:5f:23:62:a9:80:c3:dd:67:
e7:19:99:b4:5e:b5:ad:c7:bb:2a:cc:0a:55:8a:95:df:1a:ef:
ba:09:67:73:2d:4e:2e:85:63:5a:11:e6:32:cd:53:a0:bc:82:
9a:f5:a4:00:71:22:c9:ea:c4:16:23:98:e0:ce:71:4e:eb:9c:
09:cb:6a:6c:61:c4:70:7b:0f:9f:13:ff:17:08:95:3f:fd:fd:
4e:15:08:9f:04:df:d2:fd:b8:ef:4e:f9:92:3d:f0:64:5f:50:
ee:a9:41:1b:b2:b5:0e:20:e3:c5:9a:a2:b1:11:48:74:30:7f:
c7:6d:b3:14:a5:eb:4e:68:2f:84:aa:85:86:5b:ed:6e:5f:72:
d6:00:3c:41:f5:d1:86:80:d7:e8:ba:4d:9c:db:18:ee:63:27:
f1:8f:f7:c7:53:39:99:12:da:5b:dd:73:31:2d:33:a6:e2:30:
0f:31:e7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:04:07 2025 by rpki-client